diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b6171cf29..1b10ba8d0 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -272,7 +272,7 @@ jobs: # Merman CLI 0.7.0 needs Rust 1.95+, while the project gates must keep # running with the supported Rust 1.85.0 toolchain below. - name: Install Rust toolchain for Nixie - uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8 + uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a with: toolchain: '1.95.0' cache-provider: external @@ -294,24 +294,24 @@ jobs: - name: Install mdtablefix # The shared action accepts only releases with correct multi-platform # metadata and fails closed instead of compiling a formatter in CI. - uses: leynos/shared-actions/.github/actions/install-mdtablefix@0606ca899ce2995a0c4bc78e660e80832e6e8855 + uses: leynos/shared-actions/.github/actions/install-mdtablefix@872f59f53717b5bebe8e24b2f4a7496b089a939a with: version: ${{ env.MDTABLEFIX_VERSION }} - name: Install Nixie - uses: leynos/shared-actions/.github/actions/install-nixie@c4ed5ffaf0640b1907d5359a87fd1677034eec27 + uses: leynos/shared-actions/.github/actions/install-nixie@872f59f53717b5bebe8e24b2f4a7496b089a939a # The formatter profile needs nightly-only settings. Install its pinned # maintenance toolchain before restoring the supported project compiler. - name: Install formatter Rust toolchain - uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8 + uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a with: toolchain: 'nightly-2026-05-28' cache-provider: external use-sccache: 'false' - name: Install project Rust toolchain - uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8 + uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a with: toolchain: '1.85.0' cache-provider: external @@ -323,7 +323,7 @@ jobs: uses: ./.github/actions/setup-dev-fast - name: Install Whitaker - uses: leynos/shared-actions/.github/actions/install-whitaker@5a99aed78ce68dcebd3052b75c31e6f173162b1e + uses: leynos/shared-actions/.github/actions/install-whitaker@872f59f53717b5bebe8e24b2f4a7496b089a939a - name: Validate Mermaid diagrams run: make nixie @@ -631,7 +631,7 @@ jobs: - name: Install Rust toolchain if: env.LEG_RUNS == 'true' - uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8 + uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a with: toolchain: '1.85.0' cache-provider: external @@ -644,7 +644,7 @@ jobs: - name: Install makeutil id: makeutil if: env.LEG_RUNS == 'true' - uses: leynos/shared-actions/.github/actions/install-makeutil@ebe2f3105334283441f4c915eb979a0f4b9f2c04 + uses: leynos/shared-actions/.github/actions/install-makeutil@872f59f53717b5bebe8e24b2f4a7496b089a939a with: bin-dir: ${{ runner.temp }}/makeutil/bin @@ -663,7 +663,7 @@ jobs: # Restoring the tool cache is an optimization, not a prerequisite. - name: Install mdtablefix if: env.LEG_RUNS == 'true' - uses: leynos/shared-actions/.github/actions/install-mdtablefix@0606ca899ce2995a0c4bc78e660e80832e6e8855 + uses: leynos/shared-actions/.github/actions/install-mdtablefix@872f59f53717b5bebe8e24b2f4a7496b089a939a with: version: ${{ env.MDTABLEFIX_VERSION }} @@ -879,7 +879,7 @@ jobs: # pinned toolchain the other Rust-touching jobs use rather than whatever # the runner image happens to ship. - name: Install Rust toolchain - uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8 + uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a with: toolchain: '1.85.0' cache-provider: external @@ -1116,7 +1116,7 @@ jobs: enable-cache: false - name: Install project Rust toolchain - uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8 + uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a with: toolchain: '1.85.0' cache-provider: external @@ -1403,8 +1403,7 @@ jobs: if: >- ${{ !(github.event.pull_request.head.repo.fork || github.event.pull_request.user.login == 'dependabot[bot]') }} - uses: "leynos/shared-actions/.github/actions/\ - export-ubicloud-cache-credentials@dbe2e22ceaf498d85512679ccded38be9dbe7777" + uses: "leynos/shared-actions/.github/actions/export-ubicloud-cache-credentials@872f59f53717b5bebe8e24b2f4a7496b089a939a" - name: Set up sccache id: sccache @@ -1432,7 +1431,7 @@ jobs: enable-cache: false - name: Install Rust toolchain - uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8 + uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a with: toolchain: '1.85.0' cache-provider: external @@ -1442,7 +1441,7 @@ jobs: # Coverage runs the full Python suite, including native selector parity. # The restored tool cache is optional, so provision the pinned binary. - name: Install mdtablefix - uses: leynos/shared-actions/.github/actions/install-mdtablefix@0606ca899ce2995a0c4bc78e660e80832e6e8855 + uses: leynos/shared-actions/.github/actions/install-mdtablefix@872f59f53717b5bebe8e24b2f4a7496b089a939a with: version: ${{ env.MDTABLEFIX_VERSION }} @@ -1451,7 +1450,7 @@ jobs: # binary goes outside `~/.local/bin`, which the tool cache archives. - name: Install makeutil id: makeutil - uses: leynos/shared-actions/.github/actions/install-makeutil@ebe2f3105334283441f4c915eb979a0f4b9f2c04 + uses: leynos/shared-actions/.github/actions/install-makeutil@872f59f53717b5bebe8e24b2f4a7496b089a939a with: bin-dir: ${{ runner.temp }}/makeutil/bin @@ -1482,7 +1481,7 @@ jobs: # treats changes within one percentage point as measurement noise. # - name: Generate coverage - uses: leynos/shared-actions/.github/actions/generate-coverage@a5765019912a8ab6882b12db049c7cde635f3a85 + uses: leynos/shared-actions/.github/actions/generate-coverage@872f59f53717b5bebe8e24b2f4a7496b089a939a env: # The same warnings posture and the same core budget the # uninstrumented run used. @@ -1856,7 +1855,7 @@ jobs: enable-cache: false - name: Install Rust toolchain - uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8 + uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a with: toolchain: '1.85.0' cache-provider: external diff --git a/.github/workflows/coverage-main.yml b/.github/workflows/coverage-main.yml index f32bd47f2..110cf1e2a 100644 --- a/.github/workflows/coverage-main.yml +++ b/.github/workflows/coverage-main.yml @@ -158,8 +158,7 @@ jobs: # end of a double-quoted YAML scalar elides the break and the next # line's indentation, so the value is the single reference it # reads as, not two joined by a space. - uses: "leynos/shared-actions/.github/actions/\ - export-ubicloud-cache-credentials@dbe2e22ceaf498d85512679ccded38be9dbe7777" + uses: "leynos/shared-actions/.github/actions/export-ubicloud-cache-credentials@872f59f53717b5bebe8e24b2f4a7496b089a939a" - name: Set up sccache id: sccache @@ -184,7 +183,7 @@ jobs: # same pinned toolchain the pull-request coverage job uses rather than # whatever the runner image ships. - name: Install Rust toolchain - uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8 + uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a with: toolchain: '1.85.0' cache-provider: external @@ -194,7 +193,7 @@ jobs: # Trunk coverage runs the same native selector parity test as PR coverage. # The restored tool cache is optional, so provision the pinned binary. - name: Install mdtablefix - uses: leynos/shared-actions/.github/actions/install-mdtablefix@0606ca899ce2995a0c4bc78e660e80832e6e8855 + uses: leynos/shared-actions/.github/actions/install-mdtablefix@872f59f53717b5bebe8e24b2f4a7496b089a939a with: version: ${{ env.MDTABLEFIX_VERSION }} @@ -203,7 +202,7 @@ jobs: # binary goes outside `~/.local/bin`, which the tool cache archives. - name: Install makeutil id: makeutil - uses: leynos/shared-actions/.github/actions/install-makeutil@ebe2f3105334283441f4c915eb979a0f4b9f2c04 + uses: leynos/shared-actions/.github/actions/install-makeutil@872f59f53717b5bebe8e24b2f4a7496b089a939a with: bin-dir: ${{ runner.temp }}/makeutil/bin @@ -249,7 +248,7 @@ jobs: # and without the check `always` would publish its coverage as the # authoritative baseline. - name: Generate coverage - uses: leynos/shared-actions/.github/actions/generate-coverage@a5765019912a8ab6882b12db049c7cde635f3a85 + uses: leynos/shared-actions/.github/actions/generate-coverage@872f59f53717b5bebe8e24b2f4a7496b089a939a env: # The same warnings posture and the same core budget the # uninstrumented run used. @@ -293,7 +292,7 @@ jobs: # A dispatch may start from any branch, and CodeScene accepts uploads # only for the branch it analyses, so the ref is part of the guard. if: steps.codescene-token.outputs.available == 'true' && github.ref == 'refs/heads/main' - uses: leynos/shared-actions/.github/actions/upload-codescene-coverage@a5765019912a8ab6882b12db049c7cde635f3a85 + uses: leynos/shared-actions/.github/actions/upload-codescene-coverage@872f59f53717b5bebe8e24b2f4a7496b089a939a with: format: cobertura mode: upload diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml index 48f1cdfd6..f7aeab621 100644 --- a/.github/workflows/dependabot-automerge.yml +++ b/.github/workflows/dependabot-automerge.yml @@ -29,6 +29,6 @@ jobs: # The token is not used for any external cloud auth. id-token: write if: ${{ github.event_name == 'workflow_dispatch' || github.actor == 'dependabot[bot]' }} - uses: leynos/shared-actions/.github/workflows/dependabot-automerge.yml@4fb8eb7ad52454678a0662865d81d3cd17aa6e0e + uses: leynos/shared-actions/.github/workflows/dependabot-automerge.yml@872f59f53717b5bebe8e24b2f4a7496b089a939a with: pull-request-number: ${{ inputs.pull-request-number || github.event.pull_request.number }} diff --git a/.github/workflows/loom.yml b/.github/workflows/loom.yml index 01f4ba97d..afb492817 100644 --- a/.github/workflows/loom.yml +++ b/.github/workflows/loom.yml @@ -99,7 +99,7 @@ jobs: enable-cache: false - name: Install Rust toolchain - uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8 + uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a with: toolchain: '1.85.0' cache-provider: external diff --git a/.github/workflows/mutation-testing.yml b/.github/workflows/mutation-testing.yml index 55b3a91c6..065a60456 100644 --- a/.github/workflows/mutation-testing.yml +++ b/.github/workflows/mutation-testing.yml @@ -27,7 +27,7 @@ jobs: permissions: contents: read id-token: write # OIDC workflow-source resolution - uses: leynos/shared-actions/.github/workflows/mutation-mutmut.yml@774cc5a01e457714aede66e14a97b3e257812fc2 + uses: leynos/shared-actions/.github/workflows/mutation-mutmut.yml@872f59f53717b5bebe8e24b2f4a7496b089a939a with: # Flat layout: the mutable source is the cuprum/ package at the # repository root, so change detection watches it directly. diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a5ce8bf18..98deced0d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -51,7 +51,7 @@ jobs: # `0.2.0-beta1` and any other spelling fails. - name: Check the Cargo manifest version against the tag id: cargo-version - uses: leynos/shared-actions/.github/actions/ensure-cargo-version@2f58fab140cc8dfe69756aaa6a3bbb987c426023 + uses: leynos/shared-actions/.github/actions/ensure-cargo-version@872f59f53717b5bebe8e24b2f4a7496b089a939a with: manifests: rust/cuprum-rust/Cargo.toml # The shared validator for pyproject.toml exists only inside